$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf.cer File: 231e7311-eefe-40ee-a478-3ca2852934bf.cer (raw, json) Hash identifier: 1HijGrgbaaqbcxPgeLlxM2O3pGghAv1pmudYjzFYapo= Subject key identifier: E5:FC:71:E1:DA:81:BA:08:C4:B8:62:D4:07:7A:B4:43:69:42:5D:5E Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858476433F1AC8FD048BE0FAC0C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/231e7311-eefe-40ee-a478-3ca2852934bf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Oct 2024 00:45:26 +0000 Certificate not after: Mon 04 Jan 2027 01:45:26 +0000 Subordinate resources: IP: 170.52.44.0/22 IP: 192.190.134.0/23 IP: 2620:34:a000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:64:33:f1:ac:8f:d0:48:be:0f:ac:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 1 00:45:26 2024 GMT Not After : Jan 4 01:45:26 2027 GMT Subject: CN=231e7311-eefe-40ee-a478-3ca2852934bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:3e:d0:72:1a:bf:a3:ba:da:06:cb:07:92: 72:4c:df:95:ed:7b:b4:36:d5:b2:26:23:e8:18:e3: f0:26:f9:43:db:f8:8e:df:f7:81:00:30:8a:cd:67: b4:f0:db:e5:fb:58:77:12:71:49:3e:78:09:98:6a: 85:47:7f:00:ca:0f:17:44:ee:69:72:17:71:f5:a3: 12:97:d3:42:57:33:25:1a:04:a7:77:d3:78:f8:74: 11:00:91:62:23:ef:9e:20:8d:23:aa:c0:a4:9b:cc: 54:56:8e:0e:6a:0a:33:49:ec:5b:5c:59:62:96:62: d9:d2:32:82:b0:57:1d:9e:67:e7:3c:3b:39:e7:2c: dc:12:51:3d:a0:c5:85:b0:32:b4:98:9d:d7:40:73: c5:ef:df:4e:67:21:86:6a:63:42:88:ae:74:88:3d: 33:37:5d:35:a6:80:0d:71:34:de:b6:48:2a:49:1e: ce:56:5a:28:ac:e6:64:7d:f4:a4:af:d9:8d:26:49: 36:69:aa:fe:c6:02:9d:93:59:26:77:fd:e9:07:50: 91:1a:ad:ca:0f:7e:9b:42:75:cc:07:ce:de:18:df: 41:ee:ad:ca:16:bc:25:d2:b9:4f:e2:37:ba:24:c6: 5f:f3:c6:e4:4b:0a:20:89:fb:40:f4:a6:91:e1:80: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FC:71:E1:DA:81:BA:08:C4:B8:62:D4:07:7A:B4:43:69:42:5D:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/231e7311-eefe-40ee-a478-3ca2852934bf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 170.52.44.0/22 192.190.134.0/23 IPv6: 2620:34:a000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f0:09:2a:37:b0:c1:aa:86:b8:a9:82:f3:f0:f6:d4:3f:36: c7:f7:10:92:c2:87:b2:0c:1d:7c:fe:54:4c:d9:3c:23:8b:32: d0:11:e2:80:ef:54:3e:f0:39:aa:ca:3b:07:7e:0d:47:f8:ac: 13:0d:07:26:60:73:2e:d5:ea:f9:41:39:92:84:9b:a6:58:60: 73:6d:8a:b1:ba:8f:ed:64:96:ad:14:45:7a:92:5c:1b:81:26: 12:fa:b2:49:49:f1:bf:92:6e:c0:7d:f3:8a:2d:e9:2f:ca:c6: b6:72:fd:3f:ab:89:49:d0:9a:09:0a:91:0d:71:27:7d:1c:d1: d8:2f:bf:d6:c7:6c:ed:a3:77:c6:6e:2c:3f:e6:fa:f2:86:04: c7:20:24:97:f7:0f:35:c8:1b:3d:4b:b9:21:b3:8b:06:de:c3: cb:0a:88:11:bb:4d:90:e3:9e:77:f4:3a:45:72:ce:63:66:11: 8c:25:42:cf:cd:12:4c:f7:c5:dd:99:f3:37:59:68:a2:cf:35: c7:e4:09:09:b6:8c:da:68:1c:1b:4f:98:88:02:60:a0:68:c2: ae:a1:95:4a:8e:84:bc:77:58:f1:c5:2e:e6:d5:2a:0c:49:11: 4b:c5:7f:bb:6d:68:37:17:12:fc:4f:89:6f:f0:1c:02:18:1f: b3:ee:0e:b5 -----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUAQ0Mn0MoWEdkM/Gsj9BIvg+sDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTAwMTAwNDUyNloXDTI3MDEwNDAxNDUyNlowLzEtMCsGA1UEAxMk MjMxZTczMTEtZWVmZS00MGVlLWE0NzgtM2NhMjg1MjkzNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrw+0HIav6O62gbLB5JyTN+V7Xu0NtWyJiPo GOPwJvlD2/iO3/eBADCKzWe08Nvl+1h3EnFJPngJmGqFR38Ayg8XRO5pchdx9aMS l9NCVzMlGgSnd9N4+HQRAJFiI++eII0jqsCkm8xUVo4OagozSexbXFlilmLZ0jKC sFcdnmfnPDs55yzcElE9oMWFsDK0mJ3XQHPF799OZyGGamNCiK50iD0zN101poAN cTTetkgqSR7OVloorOZkffSkr9mNJkk2aar+xgKdk1kmd/3pB1CRGq3KD36bQnXM B87eGN9B7q3KFrwl0rlP4je6JMZf88bkSwogiftA9KaR4YCGDQIDAQABo4IEFjCC BBIwHQYDVR0OBBYEFOX8ceHagboIxLhi1Ad6tENpQl1eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y MzFlNzMxMS1lZWZlLTQwZWUtYTQ3OC0zY2EyODUyOTM0YmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzIzMWU3MzExLWVlZmUtNDBlZS1h NDc4LTNjYTI4NTI5MzRiZi8yMzFlNzMxMS1lZWZlLTQwZWUtYTQ3OC0zY2EyODUy OTM0YmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAKqNCwDBAHAvoYwDwQCAAIwCQMHBCYgADSgADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAP8AkqN7DBqoa4qYLz8PbUPzbH9xCSwoeyDB18/lRM2TwjizLQEeKA 71Q+8DmqyjsHfg1H+KwTDQcmYHMu1er5QTmShJumWGBzbYqxuo/tZJatFEV6klwb gSYS+rJJSfG/km7AffOKLekvysa2cv0/q4lJ0JoJCpENcSd9HNHYL7/Wx2zto3fG biw/5vryhgTHICSX9w81yBs9S7khs4sG3sPLCogRu02Q45539DpFcs5jZhGMJULP zRJM98XdmfM3WWiizzXH5AkJtozaaBwbT5iIAmCgaMKuoZVKjoS8d1jxxS7m1SoM SRFLxX+7bWg3FxL8T4lv8BwCGB+z7g61 -----END CERTIFICATE-----Generated at Thu Nov 21 15:04:14 2024 by rpki-client on console-fra.rpki-client.org